Networks

Ask something
Question Locked

Domain join problem - Small Business Server 2008

0 helpful
4 replies

by jamesr12

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Hi guys,to all the SBS2008 gurus out there,I'd really appreciate your help.I setup SBS2008 Std in our company, successfully joined two machines to the domain.But next day I couldn't join any more machines. The netsetup log shows an ldap_bind error message (53:Unwilling to perform). This shows on both the machine that I tried to unsuccessfully join to the domain. Then my own machine, the one I initially joined to the domain, gives 1006 errors in my application event log (windows cannot bind to xxxxxx.local domain (Unwilling to perform). Can anyone please help me, please?

4 replies

by shane

can you try running netDiag /v on the server and see if you spot anything. I'd imagine it would show some "fatal" errors.

Post the output here.

You can also try running netdiag /fix

More about netdiag here: http://support.microsoft.com/kb/321708

It sounds like the machines are looking for the domain controller and not finding it. Perhaps a misconfiguration on the DNS server?

by jamesr12

I ran netdiag on my client XP machine.Here are some excerpts from netdiag.log (the entries that look problematic):

DC list test . . . . . . . . . . . : Failed
Failed to enumerate DCs by using the browser. [ERROR_NO_BROWSER_SERVERS_FOUND]
List of DCs in Domain 'xxxxxx':
MSERVER01.xxxxxx.local

Kerberos test. . . . . . . . . . . : Failed
Cached Tickets:
Server: krbtgt/xxxxxx.LOCAL
End Time: 11/27/2008 2:44:25
Renew Time: 12/3/2008 16:44:25
Server: krbtgt/xxxxxx.LOCAL
End Time: 11/27/2008 2:44:25
Renew Time: 12/3/2008 16:44:25
Server: cifs/MSERVER01.xxxxxx.local
End Time: 11/27/2008 2:44:25
Renew Time: 12/3/2008 16:44:25
Server: ldap/MSERVER01.xxxxxx.local/xxxxxx.local
End Time: 11/27/2008 2:44:25
Renew Time: 12/3/2008 16:44:25
Server: LDAP/MSERVER01.xxxxxx.local
End Time: 11/27/2008 2:44:25
Renew Time: 12/3/2008 16:44:25
[FATAL] Kerberos does not have a ticket for host/MW05-JR.xxxxxx.local.

Here is the netsetup.log:

10/31 08:46:01 -----------------------------------------------------------------
10/31 08:46:01 NetpValidateName: checking to see if 'xxxxxx.local' is valid as type 3 name
10/31 08:46:01 NetpCheckDomainNameIsValid [ Exists ] for 'xxxxxx.local' returned 0x0
10/31 08:46:01 NetpValidateName: name 'xxxxxx.local' is valid for type 3
10/31 08:46:09 -----------------------------------------------------------------
10/31 08:46:09 NetpDoDomainJoin
10/31 08:46:09 NetpMachineValidToJoin: 'MW05-JR'
10/31 08:46:09 NetpGetLsaPrimaryDomain: status: 0x0
10/31 08:46:09 NetpMachineValidToJoin: status: 0x0
10/31 08:46:09 NetpJoinDomain
10/31 08:46:09 Machine: MW05-JR
10/31 08:46:09 Domain: xxxxxx.local
10/31 08:46:09 MachineAccountOU: (NULL)
10/31 08:46:09 Account: xxxxxx.local\jeremy
10/31 08:46:09 Options: 0x25
10/31 08:46:09 OS Version: 5.1
10/31 08:46:09 Build number: 2600
10/31 08:46:09 ServicePack: Service Pack 2
10/31 08:46:09 NetpValidateName: checking to see if 'xxxxxx.local' is valid as type 3 name
10/31 08:46:09 NetpCheckDomainNameIsValid [ Exists ] for 'xxxxxx.local' returned 0x0
10/31 08:46:09 NetpValidateName: name 'xxxxxx.local' is valid for type 3
10/31 08:46:09 NetpDsGetDcName: trying to find DC in domain 'xxxxxx.local', flags: 0x1020
10/31 08:46:10 NetpDsGetDcName: found DC '\\MSERVER01.xxxxxx.local' in the specified domain
10/31 08:46:11 NetpJoinDomain: status of connecting to dc '\\MSERVER01.xxxxxx.local': 0x0
10/31 08:46:11 NetpGetLsaPrimaryDomain: status: 0x0
10/31 08:46:11 NetpGetDnsHostName: Read NV Hostname: MW05-JR
10/31 08:46:11 NetpGetDnsHostName: PrimaryDnsSuffix defaulted to DNS domain name: xxxxxx.local
10/31 08:46:11 NetpLsaOpenSecret: status: 0xc0000034
10/31 08:46:11 NetpGetLsaPrimaryDomain: status: 0x0
10/31 08:46:11 NetpLsaOpenSecret: status: 0xc0000034
10/31 08:46:11 NetpJoinDomain: status of setting machine password: 0x0
10/31 08:46:13 NetpLdapBind: ldap_bind failed on \\MSERVER01.xxxxxx.local: 53: Unwilling To Perform
10/31 08:46:13 ldap_unbind status: 0x0
10/31 08:46:13 NetpSetDnsHostNameAndSpn: NetpLdapBind failed: 0x3eb
10/31 08:46:13 NetpJoinDomain: status of setting DnsHostName and SPN: 0x3eb
10/31 08:46:13 NetpJoinDomain: initiaing a rollback due to earlier errors
10/31 08:46:13 NetpLsaOpenSecret: status: 0x0
10/31 08:46:13 NetpJoinDomain: rollback: status of deleting secret: 0x0
10/31 08:46:13 NetpJoinDomain: status of disconnecting from '\\MSERVER01.xxxxxx.local': 0x0
10/31 08:46:13 NetpDoDomainJoin: status: 0x3eb
10/31 08:46:13 -----------------------------------------------------------------
10/31 08:46:13 NetpDoDomainJoin
10/31 08:46:13 NetpMachineValidToJoin: 'MW05-JR'
10/31 08:46:13 NetpGetLsaPrimaryDomain: status: 0x0
10/31 08:46:13 NetpMachineValidToJoin: status: 0x0
10/31 08:46:13 NetpJoinDomain
10/31 08:46:13 Machine: MW05-JR
10/31 08:46:13 Domain: xxxxxx.local
10/31 08:46:13 MachineAccountOU: (NULL)
10/31 08:46:13 Account: xxxxxx.local\jeremy
10/31 08:46:13 Options: 0x27
10/31 08:46:13 OS Version: 5.1
10/31 08:46:13 Build number: 2600
10/31 08:46:13 ServicePack: Service Pack 2
10/31 08:46:13 NetpValidateName: checking to see if 'xxxxxx.local' is valid as type 3 name
10/31 08:46:13 NetpCheckDomainNameIsValid [ Exists ] for 'xxxxxx.local' returned 0x0
10/31 08:46:13 NetpValidateName: name 'xxxxxx.local' is valid for type 3
10/31 08:46:13 NetpDsGetDcName: trying to find DC in domain 'xxxxxx.local', flags: 0x1020
10/31 08:46:13 NetpDsGetDcName: found DC '\\MSERVER01.xxxxxx.local' in the specified domain
10/31 08:46:14 NetpJoinDomain: status of connecting to dc '\\MSERVER01.xxxxxx.local': 0x0
10/31 08:46:14 NetpGetLsaPrimaryDomain: status: 0x0
10/31 08:46:14 NetpGetDnsHostName: Read NV Hostname: MW05-JR
10/31 08:46:14 NetpGetDnsHostName: PrimaryDnsSuffix defaulted to DNS domain name: xxxxxx.local
10/31 08:46:14 NetpLsaOpenSecret: status: 0xc0000034
10/31 08:46:14 NetpGetLsaPrimaryDomain: status: 0x0
10/31 08:46:14 NetpLsaOpenSecret: status: 0xc0000034
10/31 08:46:15 NetpManageMachineAccountWithSid: NetUserAdd on '\\MSERVER01.xxxxxx.local' for 'MW05-JR$' failed: 0x8b0
10/31 08:46:15 NetpManageMachineAccountWithSid: status of attempting to set password on '\\MSERVER01.xxxxxx.local' for 'MW05-JR$': 0x0
10/31 08:46:15 NetpJoinDomain: status of creating account: 0x0
10/31 08:46:16 NetpLdapBind: ldap_bind failed on \\MSERVER01.xxxxxx.local: 53: Unwilling To Perform
10/31 08:46:16 ldap_unbind status: 0x0
10/31 08:46:16 NetpSetDnsHostNameAndSpn: NetpLdapBind failed: 0x3eb
10/31 08:46:16 NetpJoinDomain: status of setting DnsHostName and SPN: 0x3eb
10/31 08:46:16 NetpJoinDomain: initiaing a rollback due to earlier errors
10/31 08:46:16 NetpGetLsaPrimaryDomain: status: 0x0
10/31 08:46:16 NetpManageMachineAccountWithSid: status of disabling account 'MW05-JR$' on '\\MSERVER01.xxxxxx.local': 0x0
10/31 08:46:16 NetpJoinDomain: rollback: status of deleting computer account: 0x0
10/31 08:46:16 NetpLsaOpenSecret: status: 0x0
10/31 08:46:16 NetpJoinDomain: rollback: status of deleting secret: 0x0
10/31 08:46:16 NetpJoinDomain: status of disconnecting from '\\MSERVER01.xxxxxx.local': 0x0
10/31 08:46:16 NetpDoDomainJoin: status: 0x3eb

From the results above, it is finding the DC and DNS seems fine as well. To me it looks like an authentication problem?

by kevindrew

I ran into a similar problem (existing domain member's Outlook also couldn't connect to Exchange mailboxes on SBS2008). The problem ended up being the Trend Micro Worry Free Business Advanced firewall running on the server. Do you have antivirus running on this server?

This discussion is closed to new replies.